jwt-verify 0.1.0

JWT verification library for AWS Cognito tokens and any OIDC-compatible IDP
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

#[cfg(test)]
mod tests {
    use crate::common::error::ErrorVerbosity;
    use crate::oidc::{OidcJwtVerifier, OidcProviderConfig};
    use std::time::Duration;

    #[test]
    fn test_new_verifier() {
        // Create a configuration for an OIDC provider
        let config = OidcProviderConfig::new(
            "https://accounts.example.com",
            Some("https://accounts.example.com/.well-known/jwks.json"),
            &["client1".to_string()],
            None,
        )
        .unwrap();

        // Create a verifier with the OIDC provider
        let verifier = OidcJwtVerifier::new(vec![config]).unwrap();

        // Check that the provider was registered
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 1);
        assert!(provider_ids.contains(&"https://accounts.example.com".to_string()));
    }

    #[test]
    fn test_new_single_provider() {
        // Create a verifier with a single OIDC provider
        let verifier = OidcJwtVerifier::new_single_provider(
            "https://accounts.example.com",
            Some("https://accounts.example.com/.well-known/jwks.json"),
            &["client1".to_string()],
        )
        .unwrap();

        // Check that the provider was registered
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 1);
        assert!(provider_ids.contains(&"https://accounts.example.com".to_string()));
    }

    #[test]
    fn test_add_provider() {
        // Create a verifier
        let mut verifier = OidcJwtVerifier::new(vec![]).unwrap();

        // Create a configuration for an OIDC provider
        let config = OidcProviderConfig::new(
            "https://accounts.example.com",
            Some("https://accounts.example.com/.well-known/jwks.json"),
            &["client1".to_string()],
            None,
        )
        .unwrap();

        // Add the provider to the verifier
        verifier.add_provider("example", config).unwrap();

        // Check that the provider was registered
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 1);
        assert!(provider_ids.contains(&"example".to_string()));
    }

    #[test]
    fn test_add_provider_with_discovery() {
        // Create a verifier
        let mut verifier = OidcJwtVerifier::new(vec![]).unwrap();

        // Add a provider with discovery
        verifier
            .add_provider_with_discovery(
                "example",
                "https://accounts.example.com",
                &["client1".to_string()],
            )
            .unwrap();

        // Check that the provider was registered
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 1);
        assert!(provider_ids.contains(&"example".to_string()));
    }

    #[test]
    fn test_remove_provider() {
        // Create a verifier with a provider
        let config = OidcProviderConfig::new(
            "https://accounts.example.com",
            Some("https://accounts.example.com/.well-known/jwks.json"),
            &["client1".to_string()],
            None,
        )
        .unwrap();

        let mut verifier = OidcJwtVerifier::new(vec![config]).unwrap();

        // Check that the provider was registered
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 1);

        // Remove the provider
        verifier
            .remove_provider("https://accounts.example.com")
            .unwrap();

        // Check that the provider was removed
        let provider_ids = verifier.get_provider_ids();
        assert_eq!(provider_ids.len(), 0);
    }

    #[test]
    fn test_set_error_verbosity() {
        // Create a verifier
        let mut verifier = OidcJwtVerifier::new(vec![]).unwrap();

        // Set the error verbosity level
        verifier.set_error_verbosity(ErrorVerbosity::Detailed);

        // No assertion needed, just checking that it doesn't panic
    }

    #[test]
    fn test_set_discovery_cache_duration() {
        // Create a verifier
        let mut verifier = OidcJwtVerifier::new(vec![]).unwrap();

        // Set the discovery cache duration
        verifier.set_discovery_cache_duration(Duration::from_secs(3600 * 12)); // 12 hours

        // No assertion needed, just checking that it doesn't panic
    }
}